TFL Vsebine / Revija SIR*IUS

Information System Audit Trail in Theory and Praxis

Revizijska sled je zelo pomembna oblika dnevniškega zapisa, ki se uporablja tako v informacijskih sistemih kot tudi za zavarovanje drugih zapisov. V Sloveniji je ozaveščenost ustrezne implementacije in uporabe revizijske sledi še zelo na začetku, čeprav je slovenska zakonodaja glede varstva podatkov in zavarovanja osebnih podatkov zelo zahtevna. V letu 2013 so strokovnjaki objavili članek v strokovni reviji SIR*IUS, ki natančno opredeljuje način implementacije revizijske sledi in njeno uporabo. V prispevku so opisani: zgodovina revizijske sledi, teorija z vidika revizije informacijskih sistemov in sistema upravljanja varovanja informacij, drugi strokovni in nekateri znanstveni pogledi na te zapise. Predstavljena je tudi trenutna praksa uporabe revizijske sledi v slovenskem prostoru.

Audit trail is a very important type of daily logs used in information systems, as well as for the protection of other records. In Slovenia, awareness of adequate implementation and usage of the audit trail is only at its beginning, although the Slovene legislation for data protection and protection of privacy is very restrictive. In 2013, specialists have published a paper in the auditors’ journal SIR*IUS, describing in detail the implementation of an audit trail and how to use it. This paper, however, describes the history of the audit trail, a theory regarding information system auditing from the viewpoint of information security management, and some other professional and scientific views of audit trail. The paper also presents the current practical usage of audit trails in Slovenia.